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Recent  developments  in  identification  (ID)  technologies  are  likely  to  have  a  revolutionary 
impact  on  American  society  and  the  manner  by  which  it  wages  war. 

The  good  news  is  that  broader  and  more  creative  use  of  the  new  ID  technologies  could 
enable  coalition  forces  to  achieve  dramatic  victories  in  the  Global  War  on  Terrorism  (GWOT)  by 
targeting  directly  and  effectively  a  critical  requirement  of  most  insurgencies:  the  insurgents' 
anonymity. 

The  bad  news  is  that  these  same  technologies  may  be  inherently  inimical  to  the  future  of 
privacy  and  American  civil  liberties.  They  could  transform  our  nation  and  others  into 
surveillance  societies,  concentrating  in  the  hands  of  central  governments  levers  of  control 
without  parallel  in  human  history. 

How  to  reconcile  American  interests  and  values  with  the  imperative  to  bend  every  element 
of  national  power  in  their  defense  is  the  central  paradox  of  the  GWOT.  Are  the  new  ID 
technologies  useful  means  to  the  important  end  of  securing  the  United  States  against  potentially 
cataclysmic  attacks,  or  will  they  subvert  the  very  interests  and  values  at  the  core  of  all  we  seek 
to  defend? 


IDENTIFICATION  -  FRIEND  OR  FOE? 

THE  STRATEGIC  USES  AND  FUTURE  IMPLICATIONS 
OF  THE  REVOLUTIONARY  NEW  ID  TECHNOLOGIES 

Recent  developments  in  identification  (ID)  technologies  are  likely  to  have  a  revolutionary 
impact  on  society  and  the  manner  by  which  it  wages  war.  Broader  and  more  creative  use  of  the 
new  ID  technologies  could  enable  coalition  forces  to  achieve  dramatic-perhaps  even  decisive — 
victories  in  the  Global  War  on  Terrorism  (GWOT),  by  targeting  directly  and  effectively  the 
insurgents’  anonymity.  The  technologies  could  bring  society  a  host  of  other  benefits,  as  well, 
but  critics  concerned  about  the  implications  for  privacy  and  civil  liberties  caution  against  entering 
into  what  they  warn  is  a  Faustian  bargain.  It  is  imperative  that  our  policymakers  weigh  carefully 
the  benefits  and  perils  these  attractive,  new  technologies  pose  to  American  society  before  they 
become  pervasive. 

Primarily  through  the  support  of  the  U.S.  Department  of  Defense  (DoD),  consumer 
packaged  goods  manufacturers,  and  mass  merchandisers,  ID  technologies  are  maturing 
rapidly,  paying  immediate  dividends  in  the  areas  of  supply  chain  management,  access  control, 
and  force  protection.  As  their  associated  costs  continue  to  drop,  expanded  adoption  of  these 
technologies  will  make  possible  new,  more  value-added  applications  that  could  be  enormously 
beneficial  to  society. 

Critics  of  the  technologies,  however,  argue  that  adoption  of  the  technologies  could  lead  to 
the  virtual  extinction  of  privacy.  Some  even  fear  their  abuse  will  effectively  lead  to  our 
enslavement  in  an  Orwellian1  “surveillance  society.”  Although  frequently  dismissed  by  some  in 
the  security  industry  as  alarmists  and  Luddites,  this  relatively  small  number  of  privacy  advocates 
is  attracting  more  and  more  attention  in  the  Congress  and  the  media. 

Because  the  roll-out  of  much  of  this  technology  is  already  underway,  the  window  of 
opportunity  for  public  debate  and  timely  legislation  to  help  shape  its  development  and  uses  is 
quickly  closing.  Our  civilian  policymakers  and  military  leadership  urgently  need  to  look  behind 
the  industry’s  gee-whiz  marketing  literature  and  the  privacy  advocates’  demonizing  to  gain  an 
objective  understanding  of  the  emerging  operational  environment.  Our  elected  leaders,  in 
particular,  need  to  educate  themselves  on  these  issues  in  order  to  establish  the  appropriate 
types  and  levels  of  risk  we  are  willing  to  accept  as  a  people. 

Those  risks  likely  will  be  substantial,  for  perhaps  never  before  has  the  age-old  balance 
between  security  and  liberty  been  more  precarious  yet  more  obscure.  My  hope  is  that  this 
paper  will  help,  in  some  modest  way,  to  sharpen  understanding  of  these  issues,  especially  by 
those  involved  in  mitigating  the  risks  that  the  use  or  nonuse  of  these  new  technologies  could 


pose,  not  only  to  the  immediate  safety  of  the  American  people,  but  to  the  broader  ends  of 
America’s  national  security  strategy,  core  interests,  and  fundamental  values. 

The  New  ID  Technologies  -  Emerging  Capabilities  Leading  to  Staggering  Possibilities 

A  few  years  ago,  a  U.S.  Air  Force  general  boldly  predicted:  “In  the  first  quarter  of  the  21 st 
century  [we]  will  be  able  to  find,  fix  or  track  and  target  in  near  real-time  anything  of  consequence 
that  moves  or  is  located  on  the  face  of  the  Earth.”2  That  prediction  is  rapidly  coming  true 
through  the  combination  of  new  identification  technologies  with  other  information  technologies, 
such  as  micro-processing  and  data  storage,  sensors,  global  positioning  systems  (GPS),  and 
new  software  tools  and  techniques,  such  as  data  mining  and  link  analysis.  The  strategic  and 
social  ramifications  of  this  emerging  capability  merit  considerably  more  attention  than  they  have 
received. 

The  most  significant  of  the  new  ID  technologies  are  biometrics  and  radio  frequency 
identification  (RFID). 

Biometrics  measures  an  individual’s  unique  distinguishing  physical  characteristics, 
reduces  them  to  digital  data,  and  then  compares  them  in  “one-to-one”  matching  with  those 
measurements  in  templates  previously  recorded  in  a  database.  The  most  mature  biometric 
technologies  involve  fingerprint,  iris,  hand  geometry,  face,  and  voice  recognition.3  Although 
named  by  MIT  Technology  Review  as  one  of  the  “top  1 0  emerging  technologies  that  will  change 
the  world,”4  biometrics  is  not  entirely  new;  the  ancient  Chinese  used  fingerprints  to  authenticate 
property  deeds,  and  the  early  Egyptians  used  them  to  authenticate  pottery. 5 

Especially  since  the  late  1 990s,  dropping  data  storage  costs  have  enabled  biometrics' 
reemergence  in  several,  primarily  governmental  and  military  applications,  including  force 
protection,  access  control,  workforce  maintenance,  and  detention  center  monitoring.  The  use  of 
biometrics  also  is  increasingly  common  in  the  marketplace,  where,  for  example,  millions  of 
Americans  can  now  cash  checks,  buy  gas,  or  purchase  groceries  with  a  touch  of  their  finger  at 
thousands  of  retailers  across  the  United  States.6 

As  a  leader  in  the  development  of  biometrics,  the  United  States  is  in  a  good  position  to 
leverage  its  application  to  the  GWOT.  The  Quadrennial  Defense  Review  Report  of  2001  listed 
biometrics  as  among  the  most  promising  emerging  technologies  that  DoD  plans  vigorously  to 
develop  and  exploit  “for  tracking  adversaries  and  providing  secure  authentication  of  individuals 
seeking  network  or  facility  access.”7  In  fact,  biometric  techniques  provide  the  technical 
underpinning  for  large-scale  civil  status  and  identity  “smart  “card  projects  now  being  pursued 
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around  the  world8  and  may  be  incorporated  in  the  de  facto  national  ID  card  for  the  United  States 
mandated  in  the  Real  ID  Act  of  2005.9 

A  new,  biometrics-based  national  identity  “Multipurpose  Access  Card”  proposed  for  the 
citizens  of  Iraq  would  link  to  a  central  database  tied  to  various  existing  Iraqi  governmental 
databases,  and  would  be  used  for  such  purposes  as  vetting,  checkpoints,  access  control, 
forgery  detection,  detainee  security,  decentralized  verification  and  entitlements.10  A  similar 
project  aiming  at  using  a  biometrics-based  identification  card  for  purposes  of  force  protection 
should  be  available  to  coalition  forces  by  December  2006." 

The  United  States  already  is  compiling  biometric  measurements  of  local  workers  and 
terrorism  suspects  in  Afghanistan,  in  the  streets  of  Iraq,  and  at  our  incarceration  facility  at 
Guantanamo  Bay,  Cuba,  using  the  Biometric  Automated  Toolset  developed  by  the  Battle 
Command  Battle  Laboratory  at  Ft.  Huachuca,  Arizona.  DoD's  Automated  Biometric 
Identification  System  allows  this  biometric  information  to  be  compared  with  that  contained  in  the 
world’s  largest  biometrics  database,  located  at  the  U.S.  Federal  Bureau  of  Investigation’s 
Integrated  Automated  Fingerprint  Identification  System  facility  located  in  Clarksburg,  West 
Virginia.12 

The  potential  of  this  technology  increases  exponentially  when  combined  with  RFID 
technology.  Like  biometrics,  RFID  is  not  entirely  new;  it  was  used  during  World  War  II  in 
“Identification  Friend  or  Foe”  (IFF)  systems  to  differentiate  between  friendly  and  hostile 
aircraft.13 

RFID  transponders,  or  “tags,”  consist  of  a  computer  chip  and  a  micro-antenna.  These  can 
be  embedded  directly  in  an  item  or  in  a  tiny  plastic  attachment  and  configured  to  lie  passive  until 
passing  within  activation  range  of  a  compatible  reader/scanner.  At  that  point,  the  tag  silently 
beams  its  Electronic  Product  Code  (EPC),  and  any  other  information  it  was  programmed  to 
relay,  back  to  the  reader  for  processing.  Direct  line  of  sight  is  not  required.  A  battery-operated, 
active  version  also  is  available,  including  one  using  a  printed  battery  less  than  a  millimeter 
thick.14  The  maximum  operating  range  between  tags  and  readers  is  limited  and  depends  on 
many  factors,  including  the  radio  frequency  being  used,  the  amount  of  power  emitted  by  the 
reader,  and  the  degree  of  radio  interference  in  the  vicinity.  Passive  tags  are  readable  within 
only  a  few  meters.  Active  versions  provide  dramatically  increased  range,  typically  up  to  dozens 
of  meters.15 

Unlike  the  now-common  barcode,  which  identifies  stock-keeping  units  only,  RFID  tags 
allow  identification  of  specific  items.  The  96-bit  EPC  can  allow  discrete  IDs  for  2  96  different 
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objects,  equivalent  to  80,000  trillion  trillion  objects,  more  than  enough  for  every  man-made 
object  in  existence.16 

Many  of  the  largest  consumer  product  manufacturers  in  the  world  have  already  entered 
into  RFID  contracts  and  are  working  toward  interoperability,  driving  the  cost  of  producing  RFID 
tags  down  toward  the  industry  goal  of  a  few  cents  apiece.17  In  June  2003,  Wal-Mart  threw  its 
weight  behind  RFID  by  requiring  its  top  suppliers  to  begin  attaching  RFID  tags  to  their  Wal-Mart 
shipments  by  2005.18  In  July  2004,  DoD’s  Total  Asset  Visibility  initiative  gave  RFID  another 
huge  boost  by  mandating  its  use  by  January  2005  in  products  going  to  distribution  depots.19 

Low  cost  RFID,  in  combination  with  low  cost  data  storage,  could  allow  RFIDs  to  be  placed 
on  a  vast  number  of  objects,  opening  the  way  to  “pervasive  computing”  (also  known  as 
“ubiquitous  computing”),  in  which  computers  would  become  integrated  into  the  environment, 
animating  otherwise  inert  objects.20  This  “embodied  virtuality”  will  allow  for  greater  human- 
computer  and  computer-computer  interaction.  It  will  also  allow  for  an  “Internet  of  objects,”  in 
which,  as  ludicrous  as  it  may  sound,  “a  can  of  beans  will  come  with  its  own  individual 
webpage...”21 

The  ability  to  track  individual  items  using  RFID  will  likely  improve  every  link  in  the  supply 
chain-perhaps  even  dramatically-from  manufacturing  to  retail  distribution  and  even  disposal. 
RFID  could  eliminate  most  inventory  theft  or  loss,  provide  better  shelf-life  monitoring,  assist  in 
product  recalls,  promote  “just-in-time”  inventory  management,  secure  baggage  handling,  identify 
discarded  parts  for  salvaging,  and  help  to  achieve  a  variety  of  other  efficiencies.  The 
introduction  of  networked  RFID  readers  in  the  home  (in  the  form  of  “smart  “  appliances, 
furniture,  medicine  cabinets,  ceiling  tiles,  etc.),  would  allow  for  the  monitoring  of  food, 
medicines,  belongings  ...and  even  occupants,  for  purposes  such  as  care-giving.22  Some 
privacy  advocates  fear  this  capability  could  be  abused  for  purposes  of  marketing  or  coercive 
government  control. 

RFID  already  is  the  enabling  technology  behind  "smart  tags"  at  toll  booths,  "speed 
passes"  at  gas  stations,  and  tracking  tags  on  millions  of  pets  . .  .but  this  is  just  a  hint  of  its 
potential.  As  Accenture  puts  it:  “Almost  any  physical  item  can  be  embedded  with  electronic 
tags  and  sensors  to  establish  a  unique  and  verifiable  identity,  store  a  wealth  of  information,  and 
sense  changes  in  the  environment.”23 

For  example,  RFID  tags  can  combine  with  a  whole  class  of  tiny,  networked,  wireless 
sensors,  called  “smart  dust”  and  “motes,”  to  monitor  heat,  light,  movement  and  other 
environmental  factors.  Motes  are  already  being  used  in  transportation  and  viticulture.  Using 
microelectromechanical  systems  for  locomotion,  and  distributed  intelligence  to  produce  "swarm 
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behavior"  similar  to  the  collective  behavior  of  insect  colonies,  a  meshed  “colony”  of  low- 
observable  motes  could  share  magnetometer  information,  peer-to-peer,  in  order  to  provide  early 
warning  of  an  advancing  tank  column  or  a  possible  ambush.  Sown  in  a  future  battlespace  by 
the  thousands,  at  a  cost  of  only  about  $1  apiece,  they  would  be  too  numerous  to  destroy  and,  at 
perhaps  the  size  of  a  grain  of  sand,  too  small  to  notice.  Deriving  their  power  from  sunlight, 
vibrations,  or  perhaps  just  a  coating  of  radioactive  isotopes,  they  could  have  greater  longevity 
than  humans.  Their  military  missions  could  include  such  things  as  sniffing  out  deadly  toxins, 
hunting  missiles,  or  monitoring  treaty  compliance.24 

With  the  emerging  ability  to  tag  nearly  everything  with  its  own  unique  identifier  and  to  track 
it  using  RFID,  the  possibilities  for  vastly  expanded  surveillance  are  staggering.  So,  too,  though, 
would  be  the  concomitant  amounts  of  storage  required  to  retain  the  data  generated.  Then  there 
is  the  matter  of  developing  software  sophisticated  enough  to  sort  through  what  would  amount  to 
a  series  of  massive,  global  databases,  in  order  to  find  those  proverbial  “needles”  in  the 
“haystack.”25 

Thanks  to  the  plunging  cost  of  data  storage,  a  number  of  huge  databases  already  exist  or 
are  under  development.  In  fact,  in  2004  the  world's  largest  database  was  owned  by  Wal-Mart 
and  already  contained  more  than  twice  as  much  data  as  the  entire  Internet  combined.26  Some 
observers  estimate  that  the  world's  storage  of  data  roughly  doubles  in  quantity  every  year. 27 

Sophisticated  data  analysis  tools  now  offer  the  ability  to  sort  quickly  through  mountains  of 
data  and  to  tie  disparate  data  to  individuals  using  the  new  forensics  attribution  capability  made 
possible  by  biometrics  and  RFID.  Commonly  referred  to  as  “data  mining,”  these  are  actually 
part  of  a  larger  process  known  as  “knowledge  discovery  in  databases”  or  KDD,  which  examines 
relationships  among  data  using  a  variety  of  parameters,  including  association,  sequence  or  path 
analysis,  classification,  clustering,  and  forecasting.28 

A  now-disbanded  military  intelligence  unit  code-named  “Able  Danger”  reportedly  used 
KDD  techniques  to  identify  terror  suspects  (including  four  of  the  9/1 1  hijackers)  operating  in  the 
United  States  some  1 8  months  before  September  1 1 , 2001 .  Attempts  by  Able  Danger  team 
members  to  share  their  information  with  the  FBI  in  2000  apparently  were  blocked  by  Pentagon 
lawyers  due  to  concerns  over  domestic  intelligence  gathering 29 

The  Total  Information  Awareness  (later  renamed  “Terrorism  Information  Awareness,”  or 
TIA)  project,  headed  by  former  National  Security  Advisor  Admiral  John  Poindexter  under  the 
Information  Awareness  Office  (IAO)  at  the  Defense  Advanced  Research  Projects  Agency 
(DARPA),  was  designed  to  fight  terrorism  through  data  mining  and  link  analysis,  and  by 
exploiting  such  technologies  as  “biometric  signatures  of  humans”  and  “human  network 
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analysis.’30  In  practical  terms,  this  meant  that  it  would  attempt  to  identify  terrorists  by  linking 
databases,  then  scanning  for  suspicious  activity  the  financial,  medical,  travel,  and  government 
records  of  millions  of  Americans.  Alarmed  by  the  implications,  Congress  cut  off  appropriations 
to  IAO  in  September  2003.  lAO’s  less  controversial  technologies  were  transferred  to  other 
DARPA  offices.31 

The  expansion  of  databases  and  effective  data  mining  techniques,  combined  with 
biometrics  and  RFID,  are  making  technologically  possible  for  the  first  time  the  positive 
identification  and  tracking  of  virtually  everyone  and  everything  on  Earth.  We  need  to  examine 
further  the  implications  of  this  new  capability.  Following  is  a  brief  ends,  ways,  and  means 
analysis  of  the  risk  posed  by  the  new  technologies  in  the  context  of  today’s  strategic 
environment. 

The  Strategic  Environment:  A  Time  of  Profound  Transition  with  Danger  and  Opportunity 

The  collapse  of  the  Soviet  Union  and  the  rise  of  pan-lslamic  extremism  in  the  new  context 
of  the  “Information  Age”  and  globalization  have  ushered  in  a  period  of  profound  transition 
characterized  by  volatility,  uncertainty,  complexity,  and  ambiguity.  Although  a  certain  degree  of 
vertigo  is  common  to  any  fin  de  siecle  or  millennial  period,  few  serious  observers  doubt  that  the 
international  security  environment  is  experiencing  a  shift  of  seismic  proportions.  Indeed,  some 
believe  the  international  system  may  be  undergoing  its  greatest  transition  since  the  Treaty  of 
Westphalia  in  1 648  and  the  very  creation  of  the  modern  nation-state.32  Some  have  even  argued 
that  the  Westphalian  system  is  obsolete,  that  nation-states  are  incapable  of  governing 
effectively  the  global  market  forces  now  emerging.33 

Despite  the  present  turmoil,  many  remain  optimistic  that  the  global  diffusion  of  knowledge 
at  the  heart  of  globalization  will  eventually  lead  to  a  “richer,  healthier,  safer,  more  educated,  and 
more  stable  world...,”34  a  view  consistent  with  the  Socratic  identification  of  knowledge  with 
virtue  that  long  has  influenced  Western  thought. 

Thomas  Friedman  has  been  a  leading  proponent  of  the  view  that  globalization  will  lead  to 
greater  individual  freedom  and  political  decentralization .  Yet,  even  in  his  popular  book  about 
globalization,  The  Lexus  and  the  Olive  Tree,  published  in  2000,  Friedman  gave  voice  to  a  new 
and  nagging  anxiety: 

If  the  defining  anxiety  of  the  Cold  War  was  fear  of  annihilation  from  an  enemy 
you  knew  all  too  well  in  a  world  struggle  that  was  fixed  and  stable,  the  defining 
anxiety  in  globalization  is  fear  of  rapid  change  from  an  enemy  you  can’t  see, 
touch  or  feel — a  sense  that  your  job,  community  or  workplace  can  be  changed  at 
any  moment  by  anonymous  economic  and  technological  forces  that  are  anything 
but  stable.35 


6 


The  fear  of  “anonymous  forces”  became  less  nebulous  on  the  tragic  morning  of 
September  1 1 , 2001 .  The  outrages  perpetrated  by  al-Qaeda  that  day  ended  America’s  sense  of 
complacency  regarding  trends  in  the  new  security  environment.  They  also  brought  a  degree  of 
much-needed  clarity,  as  many  confronted  for  the  first  time  the  uncomfortable  fact  that  the  forces 
of  globalization  had  helped  to  catalyze  and  facilitate  a  new  challenge  of  global  terrorism  - 
rendering  frighteningly  plausible  the  specter  of  nihilists,  masked  in  anonymity  and  intent  on 
killing  Americans,  in  possession  of  weapons  of  mass  destruction. 

In  self-defense,  the  United  States  adopted  a  policy  the  Bush  Administration  has 
euphemistically  termed  “preemptive  war,”  but  which,  in  fact,  amounts  to  preventive  war.  It  is  a 
strategy  with  which  many  Americans  and  our  allies  are  uncomfortable,  but  as  President  Bush 
has  stated:  “History  will  judge  harshly  those  who  saw  this  coming  danger  but  failed  to  act.”36  In 
the  new  security  environment,  the  Government’s  failure  to  use  any  single  element  of  national 
power  could  have  catastrophic  consequences. 

The  transformation  of  terrorism  is  an  aspect  of  globalization’s  transformation  of  crime. 

The  faster  movement  of  people,  products,  and  ideas — what  some  call  the  “end  of 
geography”37 — has  heightened  the  risks  of  fraud,  theft,  smuggling,  drug  trafficking,  human 
trafficking,  counterfeiting,  and  money  laundering.  It  has  led  to  an  explosion  in  cases  of  identity 
theft,38  computer  intrusion  (using  worms,  viruses  or  phishing),39  and  thefts  of  customer  financial 
and  other  account  data. 

This  environment  of  high  tech-empowered  criminality  has  provided  fertile  ground  for  the 
growth  of  new  identification  and  tracking  technologies.  Moreover,  the  increased  “friction”  in 
global  supply  chains  caused  by  tightened  security  has  only  increased  the  need  for  the  stronger 
supply  chain  management  the  new  technologies  offer.  The  U.S.  Department  of  Energy  used 
RFID  early  on  for  tracking  fissionable  materials.40  DoD’s  inability  to  track  supplies  in  Operation 
Desert  Storm,  which  resulted  in  the  stacking  of  thousands  of  containers  in  “iron  mountains”  in 
Gulf  ports  and  the  waste  of  billions  of  dollars,  led  to  DoD's  Total  Asset  Visibility  effort  to  use 
RFID  “to  be  able  to  pinpoint  the  location  and  content  of  every  plane,  ship,  tank,  and  cargo 
container  in  transit  around  the  world.”41  The  need  to  secure  the  integrity  of  container  shipping 
led  to  the  Smart  and  Secure  Tradelanes  initiative  dictating  the  sealing  of  containers  at  their  port 
of  origin  with  RFID  tags.42 

Another  impetus  globalization  has  given  to  the  development  and  deployment  of  the  new 
ID  technologies  is  the  increased  risk  of  pandemic.  The  recent  Severe  Acute  Respiratory 
Syndrome  (SARS)  and  Avian  Flu  Virus  scares  have  confirmed  the  danger  of  pandemic,  first 
demonstrated  by  the  rapid,  global  spread  of  the  Acquired  Immune  Deficiency  Syndrome  in  the 
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1 980s.  Positive  identification  is  critical  to  the  main  tactics  for  containing  pandemics,  which 
consist  of  case-finding,  quarantine,  contact  tracing,  and  close  control  of  border  chokepoints.43 
Taiwan  and  Singapore  already  are  using  RFID  chips  to  control  SARS  by  tracking  everyone  who 
comes  into  contact  with  SARS  patients.44 

Because  secure  borders  are  essential  to  guarding  against  pandemic  and  international 
criminality,  the  world  community’s  movement  toward  incorporating  the  new  ID  technology  in 
travel  documents  is  well  underway.  In  the  Enhanced  Border  Security  and  Visa  Act  of  2002,  the 
U.S.  Congress  imposed  a  requirement  for  the  27  countries  participating  in  the  Visa  Waiver 
Program  (VWP)45  to  begin  using  tamper-resistant,  machine-readable  passports  incorporating 
biometric  and  RFID  technology.  The  new  passport  would  comply  with  interoperable  biometric 
standards  adopted  by  the  International  Civil  Aviation  Organization.  The  Congressional  deadline 
for  compliance  by  VWP  countries  has  been  extended  to  October  26,  2006.  By  the  summer  of 
2006,  the  U.S.  Department  of  State  hopes  to  begin  issuing  “e-passports”  incorporating  the  same 
technology,  after  it  first  perfects  safeguards  designed  to  prevent  the  passports  from  being  read 
surreptitiously  by  anyone  with  the  right  scanner.46 

Our  leveraging  of  America's  visa  waiver  partners,  in  order  to  promote  the  use  of  the  new 
ID  technologies  for  purposes  of  national  security,  may  prove  to  be  a  paradigm  for  the  coming 
age.  Nation-states  may  not  be  as  effective  as  before  at  staunching  the  flow  of  capital  or  ideas, 
but  they  still  define  territory  and  citizenship.  The  ability  of  states  to  exercise  some  aspects  of 
sovereignty  may  be  eroding,  but  networks  of  states  acting  collectively  still  can  institute  far- 
reaching  security  and  other  measures  that  can  actually  strengthen  their  prerogatives. 

The  Ends:  Advancing  Core  American  Interests  and  Values  in  a  Safer  and  Better  World 

This  period  of  sweeping  change  is  a  time  of  great  opportunity  for  promoting  what 
Americans  regard  as  universal  values.  President  Bush  has  espoused  this  view,  stating: 

Today,  the  international  community  has  the  best  chance  since  the  rise  of  the 
nation-state  in  the  seventeenth  century  to  build  a  world  where  great  powers 
compete  in  peace  instead  of  continually  prepare  for  war....  The  United  States 
will  use  this  moment  of  opportunity  to  extend  the  benefits  of  freedom  across  the 
globe.  We  will  actively  work  to  bring  the  hope  of  democracy,  development,  free 
markets,  and  free  trade  to  every  corner  of  the  world. 47 

The  goals  of  U.S.  national  security  strategy  are  “to  help  make  the  world  not  just  safer  but 
better,”  and  include  “political  and  economic  freedom”  and  “respect  for  human  dignity.”  These 
are  worthy  goals,  based-as  the  overview  of  the  strategy  asserts-“on  a  distinctly  American 
internationalism  that  reflects  the  union  of  our  values  and  our  national  interests.”48  The  strategy 
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argues  from  American  first  principles,  as  enshrined  in  our  Declaration  of  Independence  and 
protected  in  our  Constitution: 

In  pursuit  of  our  goals,  our  first  imperative  is  to  clarify  what  we  stand  for:  the 
United  States  must  defend  liberty  and  justice  because  these  principles  are  right 
and  true  for  all  people  everywhere.  No  nation  owns  these  aspirations,  and  no 
nation  is  exempt  from  them.  Fathers  and  mothers  in  all  societies  want  their 
children  to  be  educated  and  to  live  free  from  poverty  and  violence.  No  people  on 
earth  yearn  to  be  oppressed,  aspire  to  servitude,  or  eagerly  await  the  midnight 
knock  of  the  secret  police. 

America  must  stand  for  the  nonnegotiable  demands  of  human  dignity:  the  rule  of 
law;  limits  on  the  absolute  power  of  the  state;  free  speech;  freedom  of  worship; 
equal  justice;  respect  for  women;  religious  and  ethnic  tolerance;  and  respect  for 
private  property.  49 

Similarly,  the  National  Strategy  for  Combating  Terrorism,  published  in  February  2003, 
concludes  by  stating: 

The  defeat  of  terror  is  a  worthy  and  necessary  goal  in  its  own  right.  But  ridding 
the  world  of  terrorism  is  essential  to  a  broader  purpose.  We  strive  to  build  an 
international  order  where  more  countries  and  peoples  are  integrated  into  a  world 
consistent  with  the  interests  and  values  we  share  with  our  partners — values  such 
as  human  dignity,  rule  of  law,  respect  for  individual  liberties,  open  and  free 
economies,  and  religious  tolerance.  We  understand  that  a  world  in  which  these 
values  are  embraced  as  standards,  not  exceptions,  will  be  the  best  antidote  to 
the  spread  of  terrorism.  This  is  a  world  we  must  build  today. 50 

In  short,  the  broader  purpose  of  the  U.S.  national  strategy  for  combating  terrorism  is  to 
create  conditions  necessary  for  a  world  consistent  with  the  interests  and  values  we  share  as 
Americans.  Moreover,  wider  acceptance  of  those  values  will  help  to  prevent  future  acts  of 
terrorism. 

How  to  reconcile  those  interests  and  values  with  the  imperative  to  bend  every  element  of 
national  power  in  their  defense  is  the  central  paradox  of  the  GWOT.  It  is  also  the  point  of 
departure  between  the  proponents  and  opponents  of  the  new  ID  technologies. 

The  conflict  over  the  uses  of  identification  is  an  identity  conflict  in  the  larger  sense,  for  the 
supporters  of  the  technologies  see  them,  inter  alia ,  as  useful  means  to  the  important  end  of 
securing  the  United  States  against  potentially  cataclysmic  attacks,  while  the  opponents  of  the 
technologies  fear  they  will  subvert  the  very  interests  and  values  at  the  core  of  all  we  seek  to 
defend. 

The  Wavs:  Know  the  Enemy  and  Know  Yourself 

In  some  ways,  our  strategy  for  combating  terror  will  say  as  much  about  us  as  it  does 
about  the  enemy.  The  Chinese  strategist  Sun  Tzu’s  oft-quoted  dictum  “know  the  enemy  and 
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know  yourself”51  is  as  valid  today  as  it  was  2500  years  ago.  We  need  to  “shape”  the  enemy 
while  understanding  our  own  character,  with  all  its  strengths  and  weaknesses. 

Through  study,  observation,  and  interrogation,  we  have  learned  much  about  al-Qaeda’s 
tactics,  infiltration  routes,  weapons  of  choice,  ideology,  etc.  Nonetheless,  most  of  us  would  not 
recognize  a  suicide  bomber  if  he  sat  at  the  opposite  table  from  us  in  a  cafe-until  it  was  too  late, 
that  is  (as  I  discovered  for  myself  during  a  particularly  disagreeable  lunch  in  Baghdad  in  2004). 52 
Although  al-Qaeda’s  top  leadership  is  relatively  visible,  we  cannot  readily  distinguish  its  rank- 
and-file  from  others  we  might  encounter  on  patrol.  Even  al-Qaeda’s  leader  in  Iraq,  Abu  Musab 
al-Zarqawi,  reportedly  was  detained  in  2004  but  released  for  lack  of  recognition.53  We  need  to 
know  the  enemy.  At  present,  we  often  do  not  even  recognize  him. 

Even  in  the  theoretical  realm,  there  is  disagreement  regarding  what  constitutes  the 
enemy’s  strategic  “center  of  gravity”  or  COG. 54  The  largest  body  of  scholarly  U.S.  military 
opinion  argues  that  ideology  is  al-Qaeda’s  strategic  COG,55  but  the  National  Defense  Strategy 
lists  the  terrorists’  ideological  support  as  a  vulnerability,  which,  according  to  some  U.S.  military 
doctrinal  precepts,  by  definition  should  rule  it  out  as  a  COG.56 

To  regard  ideology  as  the  enemy’s  COG  may  be  to  perpetuate  the  common  doctrinal 
mistake  of  confusing  the  concept  of  COG  with  that  of  “critical  vulnerability.”  Numerous  studies 
suggest  that  al-Qaeda’s  support  stems  less  from  its  violent  ideology  than  from  other  factors, 
such  as  the  Islamic  world’s  youthful  demographics,  high  unemployment,  alienation  from  local 
elites,  low  quality  of  education,  growing  urbanization,  and  rapid — if  belated — modernization.57  In 
fact,  studies  suggest  that  a  majority  of  Moslems  actually  have  a  high  regard  for  the  American 
people  and  for  American  products  and  values.58 

We  should  recognize  that  the  GWOT  is,  in  the  long  run,  a  war  of  ideas.  We  also  should 
recognize  that  every  war  of  ideas  is  a  long  run,  indeed.  Whether  we  regard  ideology  as  the 
enemy’s  COG  or  a  critical  vulnerability,  we  need  to  de-legitimize  terrorism  in  order  to  dry  up  the 
state  and  private  support  of  those  who  use  it  as  a  tactic.  Yet,  it  is  very  difficult  to  destroy  an 
idea,  and  the  question  remains  whether,  in  waging  such  a  war,  we  can  win  quickly  and 
decisively  enough  to  protect  ourselves  from  the  terrorist  use  of  WMD.  We  are  unlikely  to  stamp 
out  al-Qaeda — much  less  terrorism  as  a  tactic — any  time  soon.  Although  embracing  absolutist 
and  particularistic  values  often  directly  antithetical  to  those  generally  promoted  through 
globalization,  al-Qaeda  and  other  extremist  groups  have  proven  adept  at  using  the  anonymity 
afforded  by  the  Internet  in  order  to  establish  on-line  “emirates’69  that  facilitate  recruitment, 
linkage  with  like-minded  organizations,  and  dissemination  of  their  views.  As  long  as  the  United 
States  remains  the  world’s  most  puissant  nation,  Christian  in  heritage,  allied  with  Israel,  and  a 
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champion  of  tolerance,  pluralism,  and  gender  equality,  it  is  probable  that  some  Islamist 
extremists  will  link  together  with  a  view  to  waging  jihad  against  it,  the  arguments  of  orthodox 
religious  leaders  notwithstanding.  Even  if  the  war  of  ideas  goes  well  and  the  number  of 
terrorists  dwindles,  there  would  be  little  comfort  in  knowing  that  a  terrorist  organization  in 
possession  of  WMD  has  a  membership  numbered  in  the  hundreds  rather  than  the  thousands. 

Moreover,  we  have  not  been  faring  so  well  in  the  war  of  ideas.  Our  government’s  explicit 
doctrine  of  preemptive  war,  its  policies  regarding  incarceration  of  “illegal  combatants,”  the 
tactics  used  at  Abu  Ghraib  prison,  the  “extraordinary  rendition”  of  prisoners  to  other  countries, 
the  Patriot  Act’s  expanded  police  powers  (including  national  security  letters,  “sneak  and  peek” 
search  warrants,  and  roving  wiretaps),  the  revelation  of  domestic  spying  by  the  National 
Security  Agency,  and  the  subpoena  of  Internet  browsers  continue  to  raise  questions  among 
some  about  the  compatibility  of  American  values  and  “nonnegotiable  demands  of  human 
dignity”  with  the  manner  by  which  the  U.S.  Government  is  prosecuting  the  GWOT. 

Setting  aside  the  merits  of  the  individual  issues,  it  is  an  irony  that,  while  our  government 
follows  a  strategy  in  Iraq  designed  to  isolate  the  enemy  politically,  some  of  its  tactics  have 
tended  to  weaken  abroad  the  support  of  our  coalition  partners  and  to  alienate  at  home  the 
support  of  the  American  people.  They  also  have  tended  to  diminish  the  attractiveness  in  the 
Islamic  world  of  the  American  way  of  life  as  a  model  for  emulation  and  as  a  yardstick  against 
which  to  measure  the  conduct  of  our  enemy. 

Although  isolating  the  enemy  politically  is  a  fundamentally  valid  approach,  toward  which 
we  have  made  some  progress,  it  would  be  far  more  effective  if  we  could  isolate  him  physically. 
Until  now,  we  have  been  unable  to  do  so  because  of  the  enemy's  anonymity. 

Anonymity  is  an  oft-overlooked  but  critical  requirement  for  most  insurgencies.  The 
characteristic  of  anonymity  is  arguably  the  true  center  of  gravity  for  most  insurgencies,  as  it  is 
typically  the  leading  source  of  the  insurgents’  power  and  their  ability  to  maneuver. 

Anonymity  allows  the  insurgent  to  attack  unexpectedly,  to  hide  after  striking,  and  to 
escape  punishment,  like  a  serial  killer  who  masks  his  murderous  persona  with  banality. 
Anonymity  confers  on  him  the  illusion  of  ubiquity.  Because  he  can  appear  anywhere  and  yet  is 
nowhere  to  be  found,  he  can  strike  with  near-impunity,  which  greatly  enhances  his  essential 
capability  to  intimidate.  It  is  small  wonder,  then,  that  today  -  as  with  the  Viet  Cong  a  generation 
ago  -  our  enemies  prefer  to  cloak  themselves  in  anonymity,  even  at  the  risk  of  forfeiting  their 
legal  combatant  status.60  In  fact,  many  insurgents  may  choose  terrorist  tactics  in  preference  to 
conventional  operations  precisely  for  fear  of  disclosing  their  true  identities. 


11 


All  of  our  range,  speed,  maneuverability,  stealth,  precision,  firepower  and  willpower  avail 
us  naught  if  we  do  not  know  the  identity  of  our  enemy  and  his  location.  Were  we  able  to  pierce 
the  enemy’s  veil  of  anonymity,  to  know  his  identity  and  to  trace  his  location,  we  could  swiftly 
defeat  him.  The  new  identification  technologies  might  offer  us  those  means. 

The  Means  -  Securing  the  Battlesoace  by  Leveraging  Information  Dominance 

A  suicide  bomber  intent  on  achieving  his  version  of  martyrdom  may  not  be  capable  of 
being  deterred;  with  sufficient  actionable  intelligence,  however,  he  can  be  stopped.  Conversely, 
“knowing  that  the  event  can  be  traced  to  its  planner  and  executor ...  can  create  strong 
inhibitions  in  those  that  are  not  personally  suicidal.”61  The  means  to  achieve  these  early 
warning  and  forensic  attribution  capabilities  could  soon  be  multiplied  greatly  by  using  the  new  ID 
technologies  in  a  variety  of  ways. 

Perhaps  the  most  effective  way  is  through  the  combined  use  of  a  biometrics-based 
national  identity  card  system,  pervasive  computing  (using  RFID  and  KDD),  and  more  traditional 
investigative  “skip-tracing”  techniques.  This  would  constitute  probably  the  purest  example  of  a 
“System  of  Systems  Analysis”  approach  ever  attempted  in  warfare,  using  “networks  to  fight 
networks.’62  Employing  principles  of  operational  net  assessment  and  effects-based  operations, 
it  would  accomplish  joint  preparation  of  the  battlespace  by  creating  for  the  combatant 
commander  and  his  joint  staff  a  common  operational  picture  in  which  the  entire  range  of  the 
enemy’s  political,  military,  economic,  social,  infrastructure,  and  information  systems  are 
mapped,  using  the  new  ID  technologies  for  positive  identification  of  enemy  assets,  or  nodes, 
and  KDD  for  links  analysis  and  targeting. 

Imagine  these  technologies’  application  to  a  now  all-too-familiar  scenario  where  a  car 
bomb  explodes  in  a  marketplace.  RFID  readers  at  various  sites  around  the  market  had  earlier 
recorded  the  car's  arrival  in  the  marketplace  by  reading  EPCs  from  passing  RFID  tags 
embedded  in  the  vehicle’s  tires  and  windshield.  Other  EPCs  were  recorded  at  nearly  the  same 
instant.  A  comparison  of  the  readers  shows  that  each  had  recorded  the  same  sets  of  EPCs  as 
the  car  passed  by.  Investigators  are  disappointed  to  learn  that  none  correspond  to  a  biometric 
ID  card  or  valid  license  plate,  but  some  of  the  EPCs  correspond  to  apparel  and  others  to 
currency,  which  also  can  be  tracked.  By  querying  RFID  readers  at  chokepoints  throughout  the 
area,  the  vehicle’s  EPCs  are  traced  back  to  a  suburban  garage  that  surveillance  soon  reveals  is 
a  bomb-making  factory.  Purchase  records  and  previous  RFID  readings  of  the  other  EPCs 
implicate  an  individual  who  has  been  an  occasional  visitor  to  the  garage.  Fie  had  left  his 
biometric  ID  at  home  on  the  day  of  the  bombing,  but  his  shoes,  shirt,  and  wallet  all  contain  RFID 
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chips  that  silently  revealed  his  movements  to  readers  located  at  the  various  chokepoints. 
Continued  surveillance  of  the  factory  and  the  suspect  yield  a  long  list  of  related  EPCs  for 
additional  tracing. 

The  decision  whether  and  when  to  raid  the  factory  and/or  arrest  the  suspect  is  part  of  the 
commander's  operational  art.  He  will  need  to  design  non-linear  Rapid  Decisive  Operations 
(RDO)  focused  against  the  enemy's  nodes  and  links  and  to  choose  the  decisive  point  at  which 
to  attack  using  synchronized,  discriminate,  and  proportionate  force  or  other  measures.63  The 
operations  would  seek  to  peel  back  the  enemy’s  nodes  and  links,  exposing  sub-nodes  and  sub¬ 
links  for  further  exploitation  after  the  measurement  of  effects  and  the  appropriate  re-alignment  of 
resources. 

The  commander  would  do  well  to  wait.  This  would  allow  him  to  map  out  the  enemy’s 
entire  shape,  using  his  scalable  constellation  of  RFID  readers  and  other  sensors  to  detect  and 
record  more  and  more  links  among  an  ever-expanding  network  of  nodes.  The  delay  also  would 
allow  his  staff  time  to  use  KDD  tools  to  drill  down  deeper  into  archived  data,  in  order  to  identify 
additional  target  sets,  build  legal  cases  for  prosecution,  and  develop  planning  sequels  for  RDOs 
designed  to  roll  up  the  enemy  network  with  minimal  risk  to  noncombatants. 

This  strategy  would  allow  us  to  sort  the  insurgent  out  from  the  general  population  or,  at 
the  very  least,  cause  him  to  take  evasive  measures  tending  to  isolate  him  from  society  and 
commerce.  It  is  an  electronic  version  of  the  blockhouse  and  wire  fence  strategy  used  by  the 
English  in  the  Second  Boer  War  and  the  quadrillage  system  used  by  the  French  to  win  the 
Battle  of  Algiers  in  1 957.  It  would  enable  us  to  isolate  the  enemy  and  force  him  to  move  like  a 
“roving  bandit,”  susceptible  to  capture  at  every  identification  chokepoint,  whether  it  be  a  local 
dragnet,  a  turnstile,  a  grocery  checkout  counter,  or  an  RFID  reader  hidden  along  a  road.64 

Because  this  will  be  the  first  such  application  of  the  new  ID  technologies,  great  surprise  is 
achievable.  Opposing  forces  literally  will  not  know  what  hit  them,  except  that  they  somehow 
were  tipped  off  to  the  authorities.  Until  they  understand  and  take  countermeasures  against  the 
technologies,  it  will  be  possible  to  use  the  waves  of  arrests  to  stay  within  the  enemy’s  decision 
cycle,  or  “OODA  loop,’65  sowing  distrust  and  disunity  in  their  ranks  through  “epistemological,” 
“neo-cortical  warfare”66  tactics  such  as  bond-relationship  targeting. 

Such  an  operation  would  be  a  watershed  for  netcentric  warfare  -  the  transition  of 
information  dominance  from  force  multiplier  to  new  capability. 67  It  would  serve  as  a  prime 
example  of  netwar,  truly  akin  to  playing  the  oriental  game  of  Go  with  full  visibility  of  all  of  the 
stones,  while  one’s  own  are  screened  from  the  adversary’s  view.68 
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The  foregoing  scenario  is  not  far-fetched.  There  are  other  possibilities,  as  well.  For 
example,  strewn  among  the  rocks  beside  a  goat  trail  in  Waziristan,  movement-sensing  smart 
dust  could  trigger  surveillance  overflights  or  alert  rapid  response  teams.  The  dropping  cost  of 
RFID  technology  and  data  storage  should  make  such  scenarios  possible  in  a  few  short  years. 

The  Defense  Science  Board  Task  Force  on  Identification  Technologies  would  like  to 
speed  the  process.  Last  year,  it  advised  Defense  Secretary  Donald  Rumsfeld  to  fast-track 
these  technologies,  because  winning  the  GWOT  would  require  “a  ‘Manhattan  Project'-like 
tagging,  tracking,  and  locating”  program  for  potential  security  threats.69 

Risk -The  Potentially  Prohibitive  Costs  of  Unintended  Consequences 

The  success  of  the  Manhattan  Project  radically  changed  the  operational  environment. 
Before  launching  a  program  of  comparable  scope  in  the  area  of  identification  technologies,  it 
would  prudent  to  weigh  the  possible  second-  and  third-order  consequences. 

As  the  National  Defense  Strategy  notes,  some  objectives,  though  desirable,  may  not  be 
attainable,  while  others,  though  attainable,  may  not  be  worth  the  costs.70  Are  the  powerful,  new 
ID  technologies  desirable  but  not  attainable?  Can  these  or  any  technologies  really  provide  a 
“silver  bullet”  for  the  GWOT,  or  would  their  adoption  by  DoD  only  validate  the  criticism  that  it  is 
unable  to  shift  from  a  netcentric  to  a  culture-centric  warfighting  paradigm?71  Conversely,  are  the 
technologies  attainable  but  not  worth  the  costs?  The  costs  need  to  be  weighed  very  carefully, 
especially  since  the  same  technology  could,  and  almost  certainly  would,  be  used  in  the  United 
States,  for  and  against  American  citizens. 

In  United  States  v.  Olmstead2  in  1928,  Supreme  Court  Justice  Louis  Brandeis’  dissent 
referred  to  “the  right  to  be  let  alone”  as  “the  most  comprehensive  of  rights  and  the  right  most 
valued  by  civilized  men.”  It  is  difficult  to  see  how  a  system  of  surveillance  as  pervasive  and 
invasive  as  that  created  through  the  use  of  these  technologies  can  be  anything  but  inimical  to 
this  right. 

Yet  some  feel  that  encryption  and  other  technologies  will  moderate  many  of  the  risks  to 
privacy.  There  are  even  those  who  suggest  that  more  distributed  inverse  surveillance  of 
authority  figures,  or  “sousveillance”  (watching  from  below),  can  serve  as  a  counter  to  panoptic 
surveillance  and  a  check  on  abuses  of  authority,  as  in  the  case  of  a  citizen’s  1 991  videotaping 
of  Rodney  King’s  beating  by  Los  Angeles  police.  Already  the  wide  use  of  camera  phones  may 
enable  citizens  to  conduct  more  effective  neighborhood  watch  systems.  Some  observers  point 
to  this  as  an  early  version  of  the  “equiveillance,”  or  harmonious  balance  between  surveillance 
and  sousveillance,  that  pervasive  computing  and  worn  (or  implanted)  computers  will  bring  to 
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society.  Privacy  is  sacrificed  but  greater  transparency  is  achieved,  leading  to  better 
accountability  and  a  purer  form  of  democracy. 73 

A  futurist  recently  lecturing  at  the  Army  War  College74  may  have  been  thinking  of 
equiveillance  when  he  enthused  that  globalization  is  carrying  us  toward  “a  free  society  with  civil 
liberties  safeguarded  by  everybody  watching  everybody  else--a  panopticon.”  Perhaps  he  had 
forgotten  that  the  panopticon  devised  by  philosopher  Jeremy  Bentham  was  far  from  a  free 
society.  It  was,  in  fact,  a  prison  designed  to  mold  behavior  through  the  use  of  pervasive 
surveillance.75 

Justice  Brandeis  also  warned:  “Experience  should  teach  us  to  be  most  on  our  guard  to 
protect  liberty  when  the  government's  purposes  are  beneficent....  The  greatest  dangers  to 
liberty  lurk  in  insidious  encroachment  by  men  of  zeal,  well-meaning  but  without 
understanding.”76  Especially  by  using  the  Social  Security  number  as  a  de  facto  identification 
number-contrary  to  numerous  assurances77-the  federal  government  for  many  years  has 
incrementally  expanded  its  power  to  compel  sharing  of  personal  information,  always  citing 
favorable  political  transaction  costs  to  the  public  (e.g.,  “this  measure  will  reduce  welfare  fraud, 
crack  down  on  illegal  immigration,  penalize  deadbeat  dads,  etc.”).  The  new  ID  technologies 
seem  to  promise  even  greater  benefits.  With  the  ability  to  track  virtually  everyone  and 
everything,  governments  may  be  poised  to  strengthen  their  ability  to  exercise  sovereignty  by 
defeating  terrorism,  reducing  crime,  preventing  money  laundering,  verifying  entitlements,  and 
creating  secure-perhaps  almost  seamless-border  crossings. 

The  market,  too,  will  operate  more  efficiently,  achieve  greater  integration,  and  possibly 
even  transition  to  a  cashless  society.  This  degree  of  integration  and  interoperability  will  imply 
supranational  organization  and  regulation,  raising  the  question  whether  a  world  integrated 
enough  to  accept  one  universally  interoperable  card  might  be  a  short  step  from  a  single  world 
government — a  long-cherished  dream  to  some  but  anathema  to  others. 

Although  many  people  believe  that  only  “bad  guys”  need  fear  national  IDs  or  other  ID 
technology,  privacy  advocates  and  libertarians  on  both  ends  of  the  political  spectrum  are 
alarmed.  Few  see  world  government  as  imminent,  but  all  distrust  government,  however 
benevolent  its  stated  intentions.  Of  course,  it  is  because  America’s  Founding  Fathers  shared 
that  fundamental  distrust  that  they  chose  to  predicate  our  Constitutional  system  of  “checks  and 
balances”  on  the  idea  that  government  is  a  necessary  evil  that  must  be  limited.  At  a  minimum, 
uncertainty  regarding  governments’  uses  of  personal  information  fosters  anxiety  and 
conformity78  -  not  without  cause,  since  even  the  United  States  used  census  records  to 
segregate  Japanese-Americans  during  World  War  II.  In  the  hands  of  totalitarian  and  genocidal 
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governments,  the  new  ID  technologies  could  be  quite  lethal  -  “die  Gedanken  sind  frei"  replaced 
by  “Information  machtfrei.”  In  fact,  during  the  violent  20th  century,  state  power  directed  by 
governments  against  their  own  citizens  was  responsible  for  more  democide  than  war. 79  What  is 
to  prevent  the  new  ID  technologies  from  being  bent  to  the  same  malevolent  purposes,  again 
raising  the  question  once  asked  by  Juvenal:  “Sed  quis  custodiet  ipsos  custodes”  [Who  will 
guard  us  from  the  guardians]? 

Standing  in  stark  relief  to  the  optimistic  views  of  the  future  of  globalization  now  prevalent, 
this  dark  vision  of  a  digital  gulag  posits  that,  far  from  witnessing  the  eclipse  of  the  Westphalian 
nation-state  system  by  the  rising,  pluralistic  influence  of  non-state  actors,  we  instead  may  be  on 
the  threshold  of  an  information  counterrevolution  that  will  lead  to  unprecedented  concentrations 
of  state  power  and  their  possible  transformation  into  one  or  more  supranational  entities.  For 
those  with  political  leanings  to  the  Right,  the  bogey  tends  to  be  a  single  world  government 
menacing  to  American  ideals;  for  those  on  the  political  Left  ...a  fascist  consortium  of 
governments  and  the  military-industrial  complex. 

Many  fundamentalist  Christians  share  a  conviction  that  RFID  technology  will  migrate  from 
smart  cards  to  subcutaneous  implants  (voluntary  at  first  but  later  mandatory),  and  that  these 
implanted  chips  will  correspond  in  Biblical  prophecy  to  “the  mark  of  the  Beast”  in  Revelation 
13:16-1 7.80  Some  believe  that  the  sinister  number  ‘666,’  signifying  the  prophesied  “number  of 
the  Beast”  of  Revelation  1 3:1 8, 81  already  is  encoded  in  UPC  codes.82  Those  who  refuse  the 
chip  will  be  regarded  with  deep  suspicion  and  will  experience  persecution-the  “Great 
Tribulation”-having  been  effectively  locked  outside  the  world  economy. 

It  would  be  easier  to  dismiss  these  apocalyptic  fears  as  paranoid  were  it  not  for  the  fact 
that  Applied  Digital  Solutions  has  been  implanting  FDA-approved  RFID  “VeriChips”  in  humans 
for  years,  marketing  them  for  use  in  medical  emergencies  and  to  combat  kidnapping.  It  has 
implanted  thousands  and  now  has  no  less  than  former  Health  and  Human  Services  Secretary 
Tommy  Thompson  serving  as  its  pitchman.83 

VeriChips  are  not  very  different  from  the  over  1 5  million  microchips  already  implanted  in 
animals.84  This  leaves  some  to  wonder:  with  the  Pentagon  turning  to  the  use  of  microchips  in 
military  “dog  tags,’®5  and  dogs  now  being  tagged  with  chip  implants,  what  will  be  next  --  implants 
as  the  generation-after-next  military  dog  tag? 

Profoundly  disturbing  or  profoundly  disturbed,  such  concerns  hint  at  the  depth  of  antipathy 
the  new  ID  technologies  will  encounter  from  at  least  some  segments  of  the  population.  In  fact,  a 
privacy  activist  has  predicted  “a  resistance  -  along  the  lines  of  what  happened  in  France  in 
World  War  II”  within  five  years,  “if  logic  and  common  sense  doesn’t  prevail.”86 


16 


For  now,  what  seems  to  be  prevailing,  instead,  is  an  atmosphere  of  accusation  and 
recrimination  between  privacy  activists  and  industry  stakeholders,  with  most  other  people  either 
indifferent  to  the  technology  or  oblivious  to  it  altogether.  If  awareness  should  only  come  with 
personal  exposure,  by  that  time  the  technology  presumably  will  be  firmly  established  in  the 
market. 

Recommendations  -  The  Need  for  Risk  Mitigation  and  Balance 

Although  a  broad  spectrum  of  interoperability,  durability,  and  other  technical  and 
regulatory  difficulties87  continue  to  hamper  the  pace  of  the  new  ID  technologies’  development, 
they  are  a  present,  not  a  future,  challenge.  It  is  too  late  for  Luddite  tactics;  the  technology  is 
already  here.  The  task  now  is  to  mitigate  the  risks  posed  by  these  technologies  even  as  we 
weigh  those  risks  against  the  technologies'  usefulness  in  the  GWOT. 

Able  Danger  illustrated  the  general  dilemma  and  the  high  stakes  involved.  Had  Able 
Danger’s  reported  use  of  KDD  techniques  not  been  blocked  due  to  concerns  over  domestic 
intelligence,  might  the  9/1 1  hijackings  have  been  averted?  Similarly,  if  now  we  do  not  exploit 
the  potential  of  the  new  ID  technologies,  we  may  be  leaving  the  door  open  to  even  greater 
catastrophe.  On  the  other  hand,  how  much  domestic  intelligence  should  Americans  accept? 

We  could  undermine  our  own  strategic  center  of  gravity  --  the  national  will  -  if  we  adopt  an 
approach  to  prosecuting  the  war  that  will  lead  more  Americans  to  feel  alienated  from  their  own 
government. 

Recognizing  the  new  ID  technologies  as  a  potent  weapon,  but  also  as  a  new  category  of 
vulnerability,  we  must  develop  new  safeguards  to  protect  consumer  and  personal  privacy  before 
it  is  too  late.  The  first  step  is  to  recognize  and  confront  the  issues.  The  Department  of  State’s 
decision  to  modify  its  new  passport  technology  in  order  to  lessen  vulnerability  was  such  a  step, 
but  much  more  needs  to  be  done.  A  report  released  by  the  Government  Accountability  Office 
(GAO)  in  September  2005,  for  example,  noted  incredulously  that,  although  1 3  government 
agencies  are  using  or  plan  to  use  RFID,  only  one  identified  any  legal  or  privacy  issues  with  the 
technology.  GAO  then  went  on  to  summarize  “several  security  and  privacy  considerations  that 
may  affect  federal  agencies’  decisions  to  implement  the  technology.”88  The  Privacy  and  Civil 
Liberties  Oversight  Board,  created  by  Congress  in  December  2004  at  the  urging  of  the  9/1 1 
Commission,  should  devise  an  interagency  process  to  introduce  privacy  standards  as  well  as  to 
protect  against  overly  intrusive  security  practices  by  federal  agencies. 

It  may  well  be  that  we  shall  need  to  make  trade-offs  at  the  expense  of  privacy  for  the  sake 
of  security,  but  that  line  should  be  drawn  by  our  elected  representatives  after  full  and  informed 
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debate.  Especially  while  it  is  prosecuting  a  war,  the  Executive  branch  of  government  cannot  be 
relied  upon  alone  to  serve  as  a  sufficient  check  on  its  own  powers.  Independent  judicial  review 
would  ease  some  concerns,  but  the  Constitution,  Supreme  Court  precedents,  current  privacy 
law,  and  tort  law  do  not  offer  much  guidance  regarding  the  challenges  to  privacy  protection 
posed  by  the  new  technologies.  It  is  Congress  that  is  best  able  to  provide  the  necessary 
oversight  and  direction. 

Congress  ended  Admiral  Poindexter’s  TIA  program.  It  also  canceled  the  Computer 
Assisted  Passenger  Prescreening  (CAPPS)  program,  which  would  have  used  data  mining  to 
assign  risk  to  airline  passengers  based  on  their  data  profiles.  When  Congress  extended  the 
Patriot  Act  last  July,  lawmakers  inserted  a  provision  requiring  that  the  Justice  Department  report 
annually  to  Congress  on  the  use  of  data  mining.  It  needs  to  do  more,  such  as  to  broaden  the 
applicability  of  the  1 974  Privacy  Act  to  the  new  ID  and  data-mining  technologies,89  determine  to 
what  degree  and  to  what  ends  official  and  commercial  databases  can  be  mixed,  decide  who  can 
access  these  databases  and  under  what  conditions,  etc. 

Congress,  state  legislatures,  and  some  local  jurisdictions  have  made  various  attempts  to 
legislate  privacy  standards  for  RFID,  typically  to  mandate  disclosure  and  to  give  consumers  the 
choice  to  opt  out.90  Some  members  of  the  RFID  industry  have  endorsed  these  efforts,  while 
lobbying  by  other  members  has  succeeded  in  stymieing  them,  usually  by  arguing  against 
“premature”  restrictions  on  an  infant  industry  before  any  real  harms  have  been  demonstrated.91 

Those  arguments  notwithstanding,  this  is  precisely  the  time  that  standards  should  be 
legislated,  with  the  understanding  that  they  likely  will  need  adjusting  over  time.  As  Paula  J. 
Bruening  of  the  Center  for  Democracy  and  T echnology  put  it  in  congressional  testimony: 

[l]t  is  more  effective  and  efficient  to  begin  at  the  outset  of  the  development 
process  to  create  a  culture  of  privacy  that  incorporates  sound  technical 
protections  for  privacy  and  that  establishes  the  key  business  and  public  policy 
decisions  for  respecting  privacy  in  RFID  use  before  RFID  is  deployed,  rather  than 
building  in  privacy  after  a  scandal  or  controversy  erupts  publicly. 92 

Today,  civilization  faces  implacable  enemies  of  proven  ruthlessness  and  resourcefulness, 
against  which  the  new  identification  technologies  may  constitute  a  particularly  potent  weapon. 
Yet,  will  the  technology  fulfill  our  brightest  hopes  or  realize  our  darkest  fears,  instead?  Will 
knowledge  so  pervasive  lead  man  toward  Socratic  virtue  or,  alternately,  to  Sophoclean  hubris? 
Perhaps  Vaclav  Havel  was  right  to  say  that  globalization  is  morally  neutral;  it  can  be  good  or 
bad,  depending  on  the  kind  of  content  we  give  to  it.93  In  view  of  the  stakes,  we  need  to  choose 
that  content  wisely.  America’s  elected  leaders,  in  particular,  need  to  assess  the  feasibility  and 
suitability  of  these  technologies,  and,  thus  informed,  debate  the  acceptability  of  their  various 
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uses  in  American  society.  American  society  needs  to  recognize  and  mitigate  their  inherent  risks 
now,  lest  we  soon  discover  that,  in  the  process  of  targeting  our  enemies’  identities,  we  have 
sacrificed  our  own. 
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